Security Scan: Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9fb19951-2385-49e9-b6b0-4dee7a583c8e Domain and IP registration (RDAP)/api/v1/rdap/9fb19951-2385-49e9-b6b0-4dee7a583c8eHow often this domain was scanned/api/v1/domain/stats/1978tigerteam19781978.wypols.com Scan history for this domain/api/v1/domain/history/1978tigerteam19781978.wypols.com?limit=15

This website contacted 5 IPs in 2 countries across 3 domains to perform 5 HTTP transactions. The main domain is wypols.com and was registered 1 month ago.

Submitted URL: https://1978tigerteam19781978.wypols.com/zzr/19781978/c2t1Z2dhbkB0aWdlcnRlYW0uc2U=

Effective URL:

https://mail3s-zimbra-auth-login.frailsoft.com/zim/web-mail/#skuggan@t...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed credential-phishing kit impersonating TIGERTEAM/tigerteam.se: base64 victim email in the URL, a fake Zimbra login form, and credentials POSTed cross-origin to an unrelated domain.

Risk Factors (5)

Brand impersonation of tigerteam.se on non-official domains

Base64-encoded and plaintext victim email in URL (phishing-kit tracking token)

Credential-harvesting login form (email + password)

Cross-origin POST of captured credentials to an unrelated external domain

Deceptive hostname chain 'mail3s-zimbra-auth-login' mimicking a mail service

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

You're looking at domain '1978tigerteam19781978.wypols.com' on the commercial generic top-level domain (.com) with subdomain '1978tigerteam19781978'. Its registrable label 'wypols' stretches across 6 characters with one vowel and 5 consonants. Splitting it apart reveals 2 words: wy, pols. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.34s

Total Load Time

184 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:107 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism56% confidence

Type: webapp

Method: ml+structural

All Detected Categories

news media journalism

56%

government public service

40%

cryptocurrency blockchain

34%

e-commerce shopping

32%

adult content

31%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	104.21.92.101Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.139.20	Germany	AS13335Cloudflare, Inc.
1	172.67.191.138Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.21.94.178Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	178.63.16.224	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
5	5	-	-